IG (subwords)
▁A ▁high ▁privileged ▁user ▁who ▁has ▁access ▁to ▁transaction ▁ SM 59 ▁can ▁read ▁connection ▁details ▁stored ▁with ▁the ▁destination ▁for ▁http ▁calls ▁in SAP NetWeaver ▁Application ▁Server ABAP ▁and ABAP Plat ▁form ▁ - ▁versions ▁700 ▁70 1 ▁70 2 ▁7 10 ▁7 11 ▁7 30 ▁7 31 ▁7 40 ▁ 750 ▁75 1 ▁75 2 ▁75 3 ▁75 4 ▁75 5 ▁75 6 . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
A high privileged user who has access to transaction SM59 can read connection details stored with the destination for http calls in SAP NetWeaver Application Server ABAP and ABAP Platform - versions 700 701 702 710 711 730 731 740 750 751 752 753 754 755 756.

SHAP (words)
A high privileged user who has access to transaction SM59 can read connection details stored with the destination for http calls in SAP NetWeaver Application Server ABAP and ABAP Platform - versions 700 701 702 710 711 730 731 740 750 751 752 753 754 755 756

IG (subwords)
[CLS] A high privileged user who has access to transaction SM ##5 ##9 can read connection details stored with the destination for http calls in SAP NetWeaver App l ##ica ##tion Server ABAP and ABAP Plat form - versions 700 70 ##1 70 ##2 71 ##0 71 ##1 73 ##0 73 ##1 74 ##0 750 75 ##1 75 ##2 75 ##3 75 ##4 75 ##5 75 ##6 . [SEP]

LRP (+Pred, pos-only)
[CLS] A high privileged user who has access to transaction SM ##5 ##9 can read connection details stored with the destination for http calls in SAP NetWeaver App l ##ica ##tion Server ABAP and ABAP Plat form - versions 700 70 ##1 70 ##2 71 ##0 71 ##1 73 ##0 73 ##1 74 ##0 750 75 ##1 75 ##2 75 ##3 75 ##4 75 ##5 75 ##6 . [SEP]

LIME (words)
A high privileged user who has access to transaction SM59 can read connection details stored with the destination for http calls in SAP NetWeaver Application Server ABAP and ABAP Platform - versions 700 701 702 710 711 730 731 740 750 751 752 753 754 755 756.

SHAP (words)
A high privileged user who has access to transaction SM59 can read connection details stored with the destination for http calls in SAP NetWeaver Application Server ABAP and ABAP Platform - versions 700 701 702 710 711 730 731 740 750 751 752 753 754 755 756

IG (subwords)
[CLS] A high privileged user who has access to transaction SM ##5 ##9 can read connection details stored with the destination for http calls in SAP NetWeaver App l ##ica ##tion Server ABAP and ABAP Plat form - versions 700 70 ##1 70 ##2 71 ##0 71 ##1 73 ##0 73 ##1 74 ##0 750 75 ##1 75 ##2 75 ##3 75 ##4 75 ##5 75 ##6 . [SEP]

LRP (+Pred, pos-only)
[CLS] A high privileged user who has access to transaction SM ##5 ##9 can read connection details stored with the destination for http calls in SAP NetWeaver App l ##ica ##tion Server ABAP and ABAP Plat form - versions 700 70 ##1 70 ##2 71 ##0 71 ##1 73 ##0 73 ##1 74 ##0 750 75 ##1 75 ##2 75 ##3 75 ##4 75 ##5 75 ##6 . [SEP]

LIME (words)
A high privileged user who has access to transaction SM59 can read connection details stored with the destination for http calls in SAP NetWeaver Application Server ABAP and ABAP Platform - versions 700 701 702 710 711 730 731 740 750 751 752 753 754 755 756.

SHAP (words)
A high privileged user who has access to transaction SM59 can read connection details stored with the destination for http calls in SAP NetWeaver Application Server ABAP and ABAP Platform - versions 700 701 702 710 711 730 731 740 750 751 752 753 754 755 756

IG (subwords)
PCManager ▁versions ▁11 . 1 . 1 . 95 ▁has ▁a ▁privilege escalation ▁vulnerability . Successful ▁exploit ▁could ▁allow ▁the ▁attacker ▁to ▁access ▁certain ▁resource ▁beyond ▁its ▁privilege . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
PCManager versions 11.1.1.95 has a privilege escalation vulnerability. Successful exploit could allow the attacker to access certain resource beyond its privilege.

SHAP (words)
PCManager versions 11. 1. 1. 95 has a privilege escalation vulnerability. Successful exploit could allow the attacker to access certain resource beyond its privilege

IG (subwords)
[CLS] PCManager versions 11 . 1 . 1 . 95 has a privilege escalation vulnerability . Successful exploit could allow the attacker to access certain resource beyond its privilege . [SEP]

LRP (+Pred, pos-only)
[CLS] PCManager versions 11 . 1 . 1 . 95 has a privilege escalation vulnerability . Successful exploit could allow the attacker to access certain resource beyond its privilege . [SEP]

LIME (words)
PCManager versions 11.1.1.95 has a privilege escalation vulnerability. Successful exploit could allow the attacker to access certain resource beyond its privilege.

SHAP (words)
PCManager versions 11. 1. 1. 95 has a privilege escalation vulnerability. Successful exploit could allow the attacker to access certain resource beyond its privilege

IG (subwords)
[CLS] PCManager versions 11 . 1 . 1 . 95 has a privilege escalation vulnerability . Successful exploit could allow the attacker to access certain resource beyond its privilege . [SEP]

LRP (+Pred, pos-only)
[CLS] PCManager versions 11 . 1 . 1 . 95 has a privilege escalation vulnerability . Successful exploit could allow the attacker to access certain resource beyond its privilege . [SEP]

LIME (words)
PCManager versions 11.1.1.95 has a privilege escalation vulnerability. Successful exploit could allow the attacker to access certain resource beyond its privilege.

SHAP (words)
PCManager versions 11. 1. 1. 95 has a privilege escalation vulnerability. Successful exploit could allow the attacker to access certain resource beyond its privilege

IG (subwords)
Webmin ▁1 . 97 3 ▁is ▁affected ▁by ▁reflected ▁Cross ▁Site Scripting ▁ ( XSS ▁ ) ▁to ▁achieve Remote ▁Command Execution ▁through Webmin ▁ ' s ▁running ▁process ▁feature . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
Webmin 1.973 is affected by reflected Cross Site Scripting (XSS) to achieve Remote Command Execution through Webmin's running process feature.

SHAP (words)
Webmin 1. 973 is affected by reflected Cross Site Scripting ( XSS) to achieve Remote Command Execution through Webmin' s running process feature

IG (subwords)
[CLS] Webmin 1 . 97 ##3 is affected by reflected Cross S ite Scripting ( XSS ) to achieve Remote Command Execution through Webmin ' s running process feature . [SEP]

LRP (+Pred, pos-only)
[CLS] Webmin 1 . 97 ##3 is affected by reflected Cross S ite Scripting ( XSS ) to achieve Remote Command Execution through Webmin ' s running process feature . [SEP]

LIME (words)
Webmin 1.973 is affected by reflected Cross Site Scripting (XSS) to achieve Remote Command Execution through Webmin's running process feature.

SHAP (words)
Webmin 1. 973 is affected by reflected Cross Site Scripting ( XSS) to achieve Remote Command Execution through Webmin' s running process feature

IG (subwords)
[CLS] Webmin 1 . 97 ##3 is affected by reflected Cross S ite Scripting ( XSS ) to achieve Remote Command Execution through Webmin ' s running process feature . [SEP]

LRP (+Pred, pos-only)
[CLS] Webmin 1 . 97 ##3 is affected by reflected Cross S ite Scripting ( XSS ) to achieve Remote Command Execution through Webmin ' s running process feature . [SEP]

LIME (words)
Webmin 1.973 is affected by reflected Cross Site Scripting (XSS) to achieve Remote Command Execution through Webmin's running process feature.

SHAP (words)
Webmin 1. 973 is affected by reflected Cross Site Scripting ( XSS) to achieve Remote Command Execution through Webmin' s running process feature

IG (subwords)
▁An Out-of-Bounds ▁access ▁vulnerability ▁in Trend ▁Micro Apex ▁One ▁could ▁allow ▁a ▁local ▁attacker ▁to ▁create ▁a spec ▁ i ally ▁crafted ▁message ▁to ▁cause ▁memory ▁corruption ▁on ▁a ▁certain ▁service ▁process ▁which ▁could ▁lead ▁to ▁local ▁privilege escalation ▁on ▁affected ▁installations . ▁Please ▁note : ▁an ▁attacker ▁must ▁first ▁obtain ▁the ▁ability ▁to ▁execute low-privileged ▁code ▁on ▁the ▁target ▁system ▁in ▁order ▁to ▁exploit ▁this ▁vulnerability . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
An Out-of-Bounds access vulnerability in Trend Micro Apex One could allow a local attacker to create a specially crafted message to cause memory corruption on a certain service process which could lead to local privilege escalation on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

SHAP (words)
An Out- of- Bounds access vulnerability in Trend Micro Apex One could allow a local attacker to create a specially crafted message to cause memory corruption on a certain service process which could lead to local privilege escalation on affected installations. Please note: an attacker must first obtain the ability to execute low- privileged code on the target system in order to exploit this vulnerability

IG (subwords)
[CLS] An Out-of-Bounds access vulnerability in Trend Micro Apex One could allow a local attacker to create a spec i ##ally crafted message to cause memory corruption on a certain service process which could lead to local privilege escalation on affected installations . Please note : an attacker must first obtain the ability to exec u ##te low-privileged code on the tar get system in order to exploit this vulnerability . [SEP]

LRP (+Pred, pos-only)
[CLS] An Out-of-Bounds access vulnerability in Trend Micro Apex One could allow a local attacker to create a spec i ##ally crafted message to cause memory corruption on a certain service process which could lead to local privilege escalation on affected installations . Please note : an attacker must first obtain the ability to exec u ##te low-privileged code on the tar get system in order to exploit this vulnerability . [SEP]

LIME (words)
An Out-of-Bounds access vulnerability in Trend Micro Apex One could allow a local attacker to create a specially crafted message to cause memory corruption on a certain service process which could lead to local privilege escalation on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

SHAP (words)
An Out- of- Bounds access vulnerability in Trend Micro Apex One could allow a local attacker to create a specially crafted message to cause memory corruption on a certain service process which could lead to local privilege escalation on affected installations. Please note: an attacker must first obtain the ability to execute low- privileged code on the target system in order to exploit this vulnerability

IG (subwords)
[CLS] An Out-of-Bounds access vulnerability in Trend Micro Apex One could allow a local attacker to create a spec i ##ally crafted message to cause memory corruption on a certain service process which could lead to local privilege escalation on affected installations . Please note : an attacker must first obtain the ability to exec u ##te low-privileged code on the tar get system in order to exploit this vulnerability . [SEP]

LRP (+Pred, pos-only)
[CLS] An Out-of-Bounds access vulnerability in Trend Micro Apex One could allow a local attacker to create a spec i ##ally crafted message to cause memory corruption on a certain service process which could lead to local privilege escalation on affected installations . Please note : an attacker must first obtain the ability to exec u ##te low-privileged code on the tar get system in order to exploit this vulnerability . [SEP]

LIME (words)
An Out-of-Bounds access vulnerability in Trend Micro Apex One could allow a local attacker to create a specially crafted message to cause memory corruption on a certain service process which could lead to local privilege escalation on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

SHAP (words)
An Out- of- Bounds access vulnerability in Trend Micro Apex One could allow a local attacker to create a specially crafted message to cause memory corruption on a certain service process which could lead to local privilege escalation on affected installations. Please note: an attacker must first obtain the ability to execute low- privileged code on the target system in order to exploit this vulnerability

IG (subwords)
ffjpeg ▁through ▁2020 - 02 - 24 ▁has ▁a heap-based ▁buffer overflow ▁in ▁ j f if _ decode ▁in ▁ j f if . c . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
ffjpeg through 2020-02-24 has a heap-based buffer overflow in jfif_decode in jfif.c.

SHAP (words)
ffjpeg through 2020- 02- 24 has a heap- based buffer overflow in jfif_decode in jfif. c

IG (subwords)
[CLS] ffjpeg through 2020 - 02 - 24 has a heap-based buffer overflow in j ##fi ##f _ decode in j ##fi ##f . c . [SEP]

LRP (+Pred, pos-only)
[CLS] ffjpeg through 2020 - 02 - 24 has a heap-based buffer overflow in j ##fi ##f _ decode in j ##fi ##f . c . [SEP]

LIME (words)
ffjpeg through 2020-02-24 has a heap-based buffer overflow in jfif_decode in jfif.c.

SHAP (words)
ffjpeg through 2020- 02- 24 has a heap- based buffer overflow in jfif_decode in jfif. c

IG (subwords)
[CLS] ffjpeg through 2020 - 02 - 24 has a heap-based buffer overflow in j ##fi ##f _ decode in j ##fi ##f . c . [SEP]

LRP (+Pred, pos-only)
[CLS] ffjpeg through 2020 - 02 - 24 has a heap-based buffer overflow in j ##fi ##f _ decode in j ##fi ##f . c . [SEP]

LIME (words)
ffjpeg through 2020-02-24 has a heap-based buffer overflow in jfif_decode in jfif.c.

SHAP (words)
ffjpeg through 2020- 02- 24 has a heap- based buffer overflow in jfif_decode in jfif. c

IG (subwords)
▁ php - mod / c url ▁ ( a wrapper ▁of ▁the PHP cURL ▁extension ) ▁before ▁2 . 3 . 2 ▁allows XSS ▁via ▁the ▁post _ file _ path _ upload ▁ . php ▁key param ▁ eter ▁and ▁the POST ▁data ▁to ▁post _ multi dimensional . php . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
php-mod/curl (a wrapper of the PHP cURL extension) before 2.3.2 allows XSS via the post_file_path_upload.php key parameter and the POST data to post_multidimensional.php.

SHAP (words)
php- mod/ curl ( a wrapper of the PHP cURL extension) before 2. 3. 2 allows XSS via the post_file_path_upload. php key parameter and the POST data to post_multidimensional. php

IG (subwords)
[CLS] php - mod / c url ( a wrapper of the PHP cURL extension ) before 2 . 3 . 2 allows XSS via the post _ file _ path _ upload . php key param et ##er and the POST data to post _ multi ##di ##men ##sional . php . [SEP]

LRP (+Pred, pos-only)
[CLS] php - mod / c url ( a wrapper of the PHP cURL extension ) before 2 . 3 . 2 allows XSS via the post _ file _ path _ upload . php key param et ##er and the POST data to post _ multi ##di ##men ##sional . php . [SEP]

LIME (words)
php-mod/curl (a wrapper of the PHP cURL extension) before 2.3.2 allows XSS via the post_file_path_upload.php key parameter and the POST data to post_multidimensional.php.

SHAP (words)
php- mod/ curl ( a wrapper of the PHP cURL extension) before 2. 3. 2 allows XSS via the post_file_path_upload. php key parameter and the POST data to post_multidimensional. php

IG (subwords)
[CLS] php - mod / c url ( a wrapper of the PHP cURL extension ) before 2 . 3 . 2 allows XSS via the post _ file _ path _ upload . php key param et ##er and the POST data to post _ multi ##di ##men ##sional . php . [SEP]

LRP (+Pred, pos-only)
[CLS] php - mod / c url ( a wrapper of the PHP cURL extension ) before 2 . 3 . 2 allows XSS via the post _ file _ path _ upload . php key param et ##er and the POST data to post _ multi ##di ##men ##sional . php . [SEP]

LIME (words)
php-mod/curl (a wrapper of the PHP cURL extension) before 2.3.2 allows XSS via the post_file_path_upload.php key parameter and the POST data to post_multidimensional.php.

SHAP (words)
php- mod/ curl ( a wrapper of the PHP cURL extension) before 2. 3. 2 allows XSS via the post_file_path_upload. php key parameter and the POST data to post_multidimensional. php

IG (subwords)
▁The ▁ WP ▁Off load ▁SE S ▁ Lite WordPress plugin ▁before ▁1 . 4 . 5 ▁did ▁not ▁ e sc ▁a pe ▁some ▁of ▁the ▁fields ▁in ▁the Activity ▁page ▁of ▁the admin dashboard ▁such ▁as ▁the ▁email ' s ▁ id ▁subject ▁and ▁recipient ▁which ▁could ▁lead ▁to Stored Cross-Site Scripting ▁issues ▁when ▁an ▁attacker ▁can ▁control ▁any ▁of ▁these ▁fields ▁like ▁the ▁subject ▁when ▁filling ▁a ▁contact ▁form ▁for ▁example . ▁The XSS ▁will ▁be ▁executed ▁in ▁the ▁context ▁of ▁a ▁logged ▁in admin ▁viewing ▁the Activity ▁tab ▁of ▁the plugin ▁ . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
The WP Offload SES Lite WordPress plugin before 1.4.5 did not escape some of the fields in the Activity page of the admin dashboard such as the email's id subject and recipient which could lead to Stored Cross-Site Scripting issues when an attacker can control any of these fields like the subject when filling a contact form for example. The XSS will be executed in the context of a logged in admin viewing the Activity tab of the plugin.

SHAP (words)
The WP Offload SES Lite WordPress plugin before 1. 4. 5 did not escape some of the fields in the Activity page of the admin dashboard such as the email' s id subject and recipient which could lead to Stored Cross- Site Scripting issues when an attacker can control any of these fields like the subject when filling a contact form for example. The XSS will be executed in the context of a logged in admin viewing the Activity tab of the plugin

IG (subwords)
[CLS] The WP Off ##load S ES Lite WordPress plugin before 1 . 4 . 5 did not e sc a ##pe some of the fields in the Activity page of the admin dashboard such as the email ' s id subject and re ##c ip i ##ent which could lead to Stored Cross-Site Scripting issues when an attacker can control any of these fields like the subject when filling a contact form for example . The XSS will be exec u ##ted in the context of a logged in admin viewing the Activity tab of the plugin . [SEP]

LRP (+Pred, pos-only)
[CLS] The WP Off ##load S ES Lite WordPress plugin before 1 . 4 . 5 did not e sc a ##pe some of the fields in the Activity page of the admin dashboard such as the email ' s id subject and re ##c ip i ##ent which could lead to Stored Cross-Site Scripting issues when an attacker can control any of these fields like the subject when filling a contact form for example . The XSS will be exec u ##ted in the context of a logged in admin viewing the Activity tab of the plugin . [SEP]

LIME (words)
The WP Offload SES Lite WordPress plugin before 1.4.5 did not escape some of the fields in the Activity page of the admin dashboard such as the email's id subject and recipient which could lead to Stored Cross-Site Scripting issues when an attacker can control any of these fields like the subject when filling a contact form for example. The XSS will be executed in the context of a logged in admin viewing the Activity tab of the plugin.

SHAP (words)
The WP Offload SES Lite WordPress plugin before 1. 4. 5 did not escape some of the fields in the Activity page of the admin dashboard such as the email' s id subject and recipient which could lead to Stored Cross- Site Scripting issues when an attacker can control any of these fields like the subject when filling a contact form for example. The XSS will be executed in the context of a logged in admin viewing the Activity tab of the plugin

IG (subwords)
[CLS] The WP Off ##load S ES Lite WordPress plugin before 1 . 4 . 5 did not e sc a ##pe some of the fields in the Activity page of the admin dashboard such as the email ' s id subject and re ##c ip i ##ent which could lead to Stored Cross-Site Scripting issues when an attacker can control any of these fields like the subject when filling a contact form for example . The XSS will be exec u ##ted in the context of a logged in admin viewing the Activity tab of the plugin . [SEP]

LRP (+Pred, pos-only)
[CLS] The WP Off ##load S ES Lite WordPress plugin before 1 . 4 . 5 did not e sc a ##pe some of the fields in the Activity page of the admin dashboard such as the email ' s id subject and re ##c ip i ##ent which could lead to Stored Cross-Site Scripting issues when an attacker can control any of these fields like the subject when filling a contact form for example . The XSS will be exec u ##ted in the context of a logged in admin viewing the Activity tab of the plugin . [SEP]

LIME (words)
The WP Offload SES Lite WordPress plugin before 1.4.5 did not escape some of the fields in the Activity page of the admin dashboard such as the email's id subject and recipient which could lead to Stored Cross-Site Scripting issues when an attacker can control any of these fields like the subject when filling a contact form for example. The XSS will be executed in the context of a logged in admin viewing the Activity tab of the plugin.

SHAP (words)
The WP Offload SES Lite WordPress plugin before 1. 4. 5 did not escape some of the fields in the Activity page of the admin dashboard such as the email' s id subject and recipient which could lead to Stored Cross- Site Scripting issues when an attacker can control any of these fields like the subject when filling a contact form for example. The XSS will be executed in the context of a logged in admin viewing the Activity tab of the plugin

IG (subwords)
▁ ** UNSUPPORTED WHEN ASSIGNED ▁ ** ▁A ▁vulnerability ▁ cla ssi ▁ fi ed ▁as ▁critical ▁was ▁found ▁in ▁D ov ga ly uk ▁A I Battle . Affected ▁by ▁this ▁vulnerability ▁is ▁the ▁function ▁register User ▁of ▁the ▁file ▁site / pro ced ures . php . ▁The ▁manipulation ▁of ▁the ▁argument ▁post Login ▁leads ▁to sql inject ▁ ion . ▁The identifier ▁of ▁the ▁patch ▁is ▁4 48 e 98 80 aac ▁18 ae 78 32 f 8 d 06 5 e 03 e 46 ce 0 f 1 d 3 e 3 . ▁It ▁is ▁recommended ▁to ▁apply ▁a ▁patch ▁to ▁fix ▁this ▁issue . ▁The identifier ▁V DB - 21 83 05 ▁was ▁a ssi ▁ gne d ▁to ▁this ▁vulnerability . NOT ▁E : ▁This ▁vulnerability ▁only ▁affects ▁products ▁that ▁are ▁no ▁longer ▁supported ▁by ▁the maintainer ▁ . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in Dovgalyuk AIBattle. Affected by this vulnerability is the function registerUser of the file site/procedures.php. The manipulation of the argument postLogin leads to sql injection. The identifier of the patch is 448e9880aac18ae7832f8d065e03e46ce0f1d3e3. It is recommended to apply a patch to fix this issue. The identifier VDB-218305 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

SHAP (words)
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in Dovgalyuk AIBattle. Affected by this vulnerability is the function registerUser of the file site/ procedures. php. The manipulation of the argument postLogin leads to sql injection. The identifier of the patch is 448e9880aac18ae7832f8d065e03e46ce0f1d3e3. It is recommended to apply a patch to fix this issue. The identifier VDB- 218305 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

IG (subwords)
[CLS] * * UNSUPPORTED WHEN ASSIGNED * * A vulnerability c ##la ssi fi ##ed as critical was found in Do ##v ##gal ##yu ##k AI ##B ##att ##le . Affected by this vulnerability is the function register User of the file s ite / procedures . php . The man ip ul ##ation of the argument post Login leads to sql inject ion . The identifier of the patch is 44 ##8 ##e ##9 ##8 ##80 aac 18 ##ae ##7 ##8 ##32 ##f ##8 ##d ##0 ##65 ##e ##0 ##3 ##e ##46 ##ce ##0 ##f ##1 ##d ##3 ##e ##3 . It is recommended to apply a patch to fix this issue . The identifier V ##D ##B - 218 ##30 ##5 was a ssi g ##ned to this vulnerability . NOT E : This vulnerability only affects products that are no longer supported by the maintainer . [SEP]

LRP (+Pred, pos-only)
[CLS] * * UNSUPPORTED WHEN ASSIGNED * * A vulnerability c ##la ssi fi ##ed as critical was found in Do ##v ##gal ##yu ##k AI ##B ##att ##le . Affected by this vulnerability is the function register User of the file s ite / procedures . php . The man ip ul ##ation of the argument post Login leads to sql inject ion . The identifier of the patch is 44 ##8 ##e ##9 ##8 ##80 aac 18 ##ae ##7 ##8 ##32 ##f ##8 ##d ##0 ##65 ##e ##0 ##3 ##e ##46 ##ce ##0 ##f ##1 ##d ##3 ##e ##3 . It is recommended to apply a patch to fix this issue . The identifier V ##D ##B - 218 ##30 ##5 was a ssi g ##ned to this vulnerability . NOT E : This vulnerability only affects products that are no longer supported by the maintainer . [SEP]

LIME (words)
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in Dovgalyuk AIBattle. Affected by this vulnerability is the function registerUser of the file site/procedures.php. The manipulation of the argument postLogin leads to sql injection. The identifier of the patch is 448e9880aac18ae7832f8d065e03e46ce0f1d3e3. It is recommended to apply a patch to fix this issue. The identifier VDB-218305 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

SHAP (words)
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in Dovgalyuk AIBattle. Affected by this vulnerability is the function registerUser of the file site/ procedures. php. The manipulation of the argument postLogin leads to sql injection. The identifier of the patch is 448e9880aac18ae7832f8d065e03e46ce0f1d3e3. It is recommended to apply a patch to fix this issue. The identifier VDB- 218305 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

IG (subwords)
[CLS] * * UNSUPPORTED WHEN ASSIGNED * * A vulnerability c ##la ssi fi ##ed as critical was found in Do ##v ##gal ##yu ##k AI ##B ##att ##le . Affected by this vulnerability is the function register User of the file s ite / procedures . php . The man ip ul ##ation of the argument post Login leads to sql inject ion . The identifier of the patch is 44 ##8 ##e ##9 ##8 ##80 aac 18 ##ae ##7 ##8 ##32 ##f ##8 ##d ##0 ##65 ##e ##0 ##3 ##e ##46 ##ce ##0 ##f ##1 ##d ##3 ##e ##3 . It is recommended to apply a patch to fix this issue . The identifier V ##D ##B - 218 ##30 ##5 was a ssi g ##ned to this vulnerability . NOT E : This vulnerability only affects products that are no longer supported by the maintainer . [SEP]

LRP (+Pred, pos-only)
[CLS] * * UNSUPPORTED WHEN ASSIGNED * * A vulnerability c ##la ssi fi ##ed as critical was found in Do ##v ##gal ##yu ##k AI ##B ##att ##le . Affected by this vulnerability is the function register User of the file s ite / procedures . php . The man ip ul ##ation of the argument post Login leads to sql inject ion . The identifier of the patch is 44 ##8 ##e ##9 ##8 ##80 aac 18 ##ae ##7 ##8 ##32 ##f ##8 ##d ##0 ##65 ##e ##0 ##3 ##e ##46 ##ce ##0 ##f ##1 ##d ##3 ##e ##3 . It is recommended to apply a patch to fix this issue . The identifier V ##D ##B - 218 ##30 ##5 was a ssi g ##ned to this vulnerability . NOT E : This vulnerability only affects products that are no longer supported by the maintainer . [SEP]

LIME (words)
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in Dovgalyuk AIBattle. Affected by this vulnerability is the function registerUser of the file site/procedures.php. The manipulation of the argument postLogin leads to sql injection. The identifier of the patch is 448e9880aac18ae7832f8d065e03e46ce0f1d3e3. It is recommended to apply a patch to fix this issue. The identifier VDB-218305 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

SHAP (words)
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in Dovgalyuk AIBattle. Affected by this vulnerability is the function registerUser of the file site/ procedures. php. The manipulation of the argument postLogin leads to sql injection. The identifier of the patch is 448e9880aac18ae7832f8d065e03e46ce0f1d3e3. It is recommended to apply a patch to fix this issue. The identifier VDB- 218305 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

IG (subwords)
▁A man-in-the-middle ▁vulnerability ▁in ▁Co he s ity ▁Data Plat ▁form ▁support ▁channel ▁in ▁version ▁6 . 3 ▁up ▁to ▁6 . 3 . 1 g ▁6 . 4 ▁up ▁to ▁6 . 4 . 1 c ▁and ▁6 . 5 . 1 ▁through ▁6 . 5 . 1 b . ▁Mi ssi ▁ ng ▁server authentication ▁in ▁impacted ▁versions ▁can ▁allow ▁an ▁attacker ▁to Man-in-the-middle ▁ ( MITM ▁ ) ▁support ▁channel UI ▁ se ssi ▁on ▁to ▁Co he s ity ▁Data Plat ▁form ▁cluster . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
A man-in-the-middle vulnerability in Cohesity DataPlatform support channel in version 6.3 up to 6.3.1g 6.4 up to 6.4.1c and 6.5.1 through 6.5.1b. Missing server authentication in impacted versions can allow an attacker to Man-in-the-middle (MITM) support channel UI session to Cohesity DataPlatform cluster.

SHAP (words)
A man- in- the- middle vulnerability in Cohesity DataPlatform support channel in version 6. 3 up to 6. 3. 1g 6. 4 up to 6. 4. 1c and 6. 5. 1 through 6. 5. 1b. Missing server authentication in impacted versions can allow an attacker to Man- in- the- middle ( MITM) support channel UI session to Cohesity DataPlatform cluster

IG (subwords)
[CLS] A man-in-the-middle vulnerability in Co ##hes ##ity Data Plat form support channel in version 6 . 3 up to 6 . 3 . 1 ##g 6 . 4 up to 6 . 4 . 1 ##c and 6 . 5 . 1 through 6 . 5 . 1 ##b . Mi ssi ng server authentication in impacted versions can allow an attacker to Man-in-the-middle ( MITM ) support channel UI se ssi on to Co ##hes ##ity Data Plat form cluster . [SEP]

LRP (+Pred, pos-only)
[CLS] A man-in-the-middle vulnerability in Co ##hes ##ity Data Plat form support channel in version 6 . 3 up to 6 . 3 . 1 ##g 6 . 4 up to 6 . 4 . 1 ##c and 6 . 5 . 1 through 6 . 5 . 1 ##b . Mi ssi ng server authentication in impacted versions can allow an attacker to Man-in-the-middle ( MITM ) support channel UI se ssi on to Co ##hes ##ity Data Plat form cluster . [SEP]

LIME (words)
A man-in-the-middle vulnerability in Cohesity DataPlatform support channel in version 6.3 up to 6.3.1g 6.4 up to 6.4.1c and 6.5.1 through 6.5.1b. Missing server authentication in impacted versions can allow an attacker to Man-in-the-middle (MITM) support channel UI session to Cohesity DataPlatform cluster.

SHAP (words)
A man- in- the- middle vulnerability in Cohesity DataPlatform support channel in version 6. 3 up to 6. 3. 1g 6. 4 up to 6. 4. 1c and 6. 5. 1 through 6. 5. 1b. Missing server authentication in impacted versions can allow an attacker to Man- in- the- middle ( MITM) support channel UI session to Cohesity DataPlatform cluster

IG (subwords)
[CLS] A man-in-the-middle vulnerability in Co ##hes ##ity Data Plat form support channel in version 6 . 3 up to 6 . 3 . 1 ##g 6 . 4 up to 6 . 4 . 1 ##c and 6 . 5 . 1 through 6 . 5 . 1 ##b . Mi ssi ng server authentication in impacted versions can allow an attacker to Man-in-the-middle ( MITM ) support channel UI se ssi on to Co ##hes ##ity Data Plat form cluster . [SEP]

LRP (+Pred, pos-only)
[CLS] A man-in-the-middle vulnerability in Co ##hes ##ity Data Plat form support channel in version 6 . 3 up to 6 . 3 . 1 ##g 6 . 4 up to 6 . 4 . 1 ##c and 6 . 5 . 1 through 6 . 5 . 1 ##b . Mi ssi ng server authentication in impacted versions can allow an attacker to Man-in-the-middle ( MITM ) support channel UI se ssi on to Co ##hes ##ity Data Plat form cluster . [SEP]

LIME (words)
A man-in-the-middle vulnerability in Cohesity DataPlatform support channel in version 6.3 up to 6.3.1g 6.4 up to 6.4.1c and 6.5.1 through 6.5.1b. Missing server authentication in impacted versions can allow an attacker to Man-in-the-middle (MITM) support channel UI session to Cohesity DataPlatform cluster.

SHAP (words)
A man- in- the- middle vulnerability in Cohesity DataPlatform support channel in version 6. 3 up to 6. 3. 1g 6. 4 up to 6. 4. 1c and 6. 5. 1 through 6. 5. 1b. Missing server authentication in impacted versions can allow an attacker to Man- in- the- middle ( MITM) support channel UI session to Cohesity DataPlatform cluster

IG (subwords)
▁E MQ ▁X Broker ▁versions ▁prior ▁to ▁4 . 2 . 8 ▁are ▁vulnerable ▁to ▁a ▁denial ▁of ▁service ▁attack ▁as ▁a ▁result ▁of ▁ex ce ssi ▁ ve ▁memory ▁consumption ▁due ▁to ▁the ▁handling ▁of untrusted ▁input s . ▁These ▁input s ▁cause ▁the ▁message ▁broker ▁to ▁consume ▁large ▁amounts ▁of ▁memory ▁resulting ▁in ▁the ▁application ▁being ▁terminated ▁by ▁the ▁operating ▁system . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
EMQ X Broker versions prior to 4.2.8 are vulnerable to a denial of service attack as a result of excessive memory consumption due to the handling of untrusted inputs. These inputs cause the message broker to consume large amounts of memory resulting in the application being terminated by the operating system.

SHAP (words)
EMQ X Broker versions prior to 4. 2. 8 are vulnerable to a denial of service attack as a result of excessive memory consumption due to the handling of untrusted inputs. These inputs cause the message broker to consume large amounts of memory resulting in the application being terminated by the operating system

IG (subwords)
[CLS] EM Q X Broker versions prior to 4 . 2 . 8 are vulnerable to a denial of service attack as a result of ex ##ce ssi ve memory consumption due to the handling of untrusted inputs . These inputs cause the message broker to consume large amounts of memory resulting in the application being terminated by the operating system . [SEP]

LRP (+Pred, pos-only)
[CLS] EM Q X Broker versions prior to 4 . 2 . 8 are vulnerable to a denial of service attack as a result of ex ##ce ssi ve memory consumption due to the handling of untrusted inputs . These inputs cause the message broker to consume large amounts of memory resulting in the application being terminated by the operating system . [SEP]

LIME (words)
EMQ X Broker versions prior to 4.2.8 are vulnerable to a denial of service attack as a result of excessive memory consumption due to the handling of untrusted inputs. These inputs cause the message broker to consume large amounts of memory resulting in the application being terminated by the operating system.

SHAP (words)
EMQ X Broker versions prior to 4. 2. 8 are vulnerable to a denial of service attack as a result of excessive memory consumption due to the handling of untrusted inputs. These inputs cause the message broker to consume large amounts of memory resulting in the application being terminated by the operating system

IG (subwords)
[CLS] EM Q X Broker versions prior to 4 . 2 . 8 are vulnerable to a denial of service attack as a result of ex ##ce ssi ve memory consumption due to the handling of untrusted inputs . These inputs cause the message broker to consume large amounts of memory resulting in the application being terminated by the operating system . [SEP]

LRP (+Pred, pos-only)
[CLS] EM Q X Broker versions prior to 4 . 2 . 8 are vulnerable to a denial of service attack as a result of ex ##ce ssi ve memory consumption due to the handling of untrusted inputs . These inputs cause the message broker to consume large amounts of memory resulting in the application being terminated by the operating system . [SEP]

LIME (words)
EMQ X Broker versions prior to 4.2.8 are vulnerable to a denial of service attack as a result of excessive memory consumption due to the handling of untrusted inputs. These inputs cause the message broker to consume large amounts of memory resulting in the application being terminated by the operating system.

SHAP (words)
EMQ X Broker versions prior to 4. 2. 8 are vulnerable to a denial of service attack as a result of excessive memory consumption due to the handling of untrusted inputs. These inputs cause the message broker to consume large amounts of memory resulting in the application being terminated by the operating system

IG (subwords)
▁An ▁issue ▁was ▁di sc ▁over ed ▁in Envoy ▁through ▁1 . 71 . 1 . ▁There ▁is ▁a ▁remotely exploitable NULL ▁ pointer dereference ▁and ▁crash ▁in TLS ▁when ▁an ▁unknown TLS ▁alert ▁code ▁is ▁received . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference and crash in TLS when an unknown TLS alert code is received.

SHAP (words)
An issue was discovered in Envoy through 1. 71. 1. There is a remotely exploitable NULL pointer dereference and crash in TLS when an unknown TLS alert code is received

IG (subwords)
[CLS] An issue was di sc over ##ed in Envoy through 1 . 71 . 1 . There is a remotely exploitable NULL pointer dereference and crash in TLS when an unknown TLS alert code is received . [SEP]

LRP (+Pred, pos-only)
[CLS] An issue was di sc over ##ed in Envoy through 1 . 71 . 1 . There is a remotely exploitable NULL pointer dereference and crash in TLS when an unknown TLS alert code is received . [SEP]

LIME (words)
An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference and crash in TLS when an unknown TLS alert code is received.

SHAP (words)
An issue was discovered in Envoy through 1. 71. 1. There is a remotely exploitable NULL pointer dereference and crash in TLS when an unknown TLS alert code is received

IG (subwords)
[CLS] An issue was di sc over ##ed in Envoy through 1 . 71 . 1 . There is a remotely exploitable NULL pointer dereference and crash in TLS when an unknown TLS alert code is received . [SEP]

LRP (+Pred, pos-only)
[CLS] An issue was di sc over ##ed in Envoy through 1 . 71 . 1 . There is a remotely exploitable NULL pointer dereference and crash in TLS when an unknown TLS alert code is received . [SEP]

LIME (words)
An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference and crash in TLS when an unknown TLS alert code is received.

SHAP (words)
An issue was discovered in Envoy through 1. 71. 1. There is a remotely exploitable NULL pointer dereference and crash in TLS when an unknown TLS alert code is received

IG (subwords)
▁If ▁an ▁attacker ▁were ▁to ▁access ▁memory ▁locations ▁of ▁ LS ▁ EL ECT RIC ▁X BC - DN 32 U ▁with ▁operating ▁system ▁version ▁ 01 . 80 ▁that ▁are ▁out sid ▁ e ▁of ▁the ▁communication ▁buffer ▁the ▁device ▁stops ▁operating . ▁This ▁could ▁allow ▁an ▁attacker ▁to ▁cause ▁a denial-of-service ▁condition . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
If an attacker were to access memory locations of LS ELECTRIC XBC-DN32U with operating system version 01.80 that are outside of the communication buffer the device stops operating. This could allow an attacker to cause a denial-of-service condition.

SHAP (words)
If an attacker were to access memory locations of LS ELECTRIC XBC- DN32U with operating system version 01. 80 that are outside of the communication buffer the device stops operating. This could allow an attacker to cause a denial- of- service condition

IG (subwords)
[CLS] If an attacker were to access memory locations of L ##S EL EC ##TR ##IC X ##BC - DN 32 ##U with operating system version 01 . 80 that are out sid e of the communication buffer the dev ice stops operating . This could allow an attacker to cause a denial-of-service condition . [SEP]

LRP (+Pred, pos-only)
[CLS] If an attacker were to access memory locations of L ##S EL EC ##TR ##IC X ##BC - DN 32 ##U with operating system version 01 . 80 that are out sid e of the communication buffer the dev ice stops operating . This could allow an attacker to cause a denial-of-service condition . [SEP]

LIME (words)
If an attacker were to access memory locations of LS ELECTRIC XBC-DN32U with operating system version 01.80 that are outside of the communication buffer the device stops operating. This could allow an attacker to cause a denial-of-service condition.

SHAP (words)
If an attacker were to access memory locations of LS ELECTRIC XBC- DN32U with operating system version 01. 80 that are outside of the communication buffer the device stops operating. This could allow an attacker to cause a denial- of- service condition

IG (subwords)
[CLS] If an attacker were to access memory locations of L ##S EL EC ##TR ##IC X ##BC - DN 32 ##U with operating system version 01 . 80 that are out sid e of the communication buffer the dev ice stops operating . This could allow an attacker to cause a denial-of-service condition . [SEP]

LRP (+Pred, pos-only)
[CLS] If an attacker were to access memory locations of L ##S EL EC ##TR ##IC X ##BC - DN 32 ##U with operating system version 01 . 80 that are out sid e of the communication buffer the dev ice stops operating . This could allow an attacker to cause a denial-of-service condition . [SEP]

LIME (words)
If an attacker were to access memory locations of LS ELECTRIC XBC-DN32U with operating system version 01.80 that are outside of the communication buffer the device stops operating. This could allow an attacker to cause a denial-of-service condition.

SHAP (words)
If an attacker were to access memory locations of LS ELECTRIC XBC- DN32U with operating system version 01. 80 that are outside of the communication buffer the device stops operating. This could allow an attacker to cause a denial- of- service condition

IG (subwords)
▁A ▁C WE - 75 9 : ▁Use ▁of ▁a ▁One - Way Hash ▁without ▁a ▁Salt ▁vulnerability ▁exists ▁in ▁ EV link ▁City ▁ ( EV C 1 S 22 P 4 ▁ / ▁E VC 1 S 7 P 4 ▁all ▁versions ▁prior ▁to ▁R 8 ▁V 3 . 4 . 0 . 1 ) ▁ EV link ▁Park ing ▁ ( EV W 2 ▁ / ▁E VF 2 ▁ / ▁ EV . 2 ▁all ▁versions ▁prior ▁to ▁R 8 ▁V 3 . 4 . 0 . 1 ) ▁and ▁ EV link ▁Smart ▁Wall box ▁ ( EV B 1 A ▁all ▁versions ▁prior ▁to ▁R 8 ▁V 3 . 4 . 0 . 1 ▁ ) ▁that ▁could ▁lead ▁an ▁attacker ▁to ▁get ▁knowledge ▁of ▁charging ▁station ▁user ▁account credential ▁ s ▁using ▁dictionary ▁attacks ▁techniques . <sep> <cls>

LRP (+Pred, pos-only)
n/a

LIME (words)
A CWE-759: Use of a One-Way Hash without a Salt vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1) EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1) and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could lead an attacker to get knowledge of charging station user account credentials using dictionary attacks techniques.

SHAP (words)
A CWE- 759: Use of a One- Way Hash without a Salt vulnerability exists in EVlink City ( EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3. 4. 0. 1) EVlink Parking ( EVW2 / EVF2 / EV. 2 all versions prior to R8 V3. 4. 0. 1) and EVlink Smart Wallbox ( EVB1A all versions prior to R8 V3. 4. 0. 1 ) that could lead an attacker to get knowledge of charging station user account credentials using dictionary attacks techniques

IG (subwords)
[CLS] A CW ##E - 75 ##9 : Use of a One - Way Hash without a Salt vulnerability exists in E ##V ##link City ( E ##VC ##1 ##S ##22 ##P ##4 / E ##VC ##1 ##S ##7 ##P ##4 all versions prior to R ##8 V ##3 . 4 . 0 . 1 ) E ##V ##link Park ##ing ( E ##V ##W ##2 / E ##V ##F ##2 / E ##V . 2 all versions prior to R ##8 V ##3 . 4 . 0 . 1 ) and E ##V ##link Smart Wall ##box ( E ##VB ##1 ##A all versions prior to R ##8 V ##3 . 4 . 0 . 1 ) that could lead an attacker to get knowledge of char g ##ing station user account credential s using dictionary attacks techniques . [SEP]